Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add medy-gribkov/arcana --skill fullstack-developergit clone --depth 1 https://github.com/medy-gribkov/arcanaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/medy-gribkov/arcana/fullstack-developer)<a href="https://agentmods.dev/skills/medy-gribkov/arcana/fullstack-developer"><img src="https://agentmods.dev/badge/skills/medy-gribkov/arcana/fullstack-developer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/medy-gribkov/arcana/fullstack-developer"><img src="https://agentmods.dev/badge/skills/medy-gribkov/arcana/fullstack-developer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01700 |
| Opus 5.5 | $0.00000 | $0.00680 |
| Sonnet 5.5 | $0.00000 | $0.00340 |
| Haiku 4.5 | $0.00000 | $0.00170 |
Grade A, and why
fullstack-developer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 241 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Full-Stack Developer
Act as a senior full-stack engineer. Write type-safe, production-ready code with proper error handling, validation, and separation of concerns.
API Design Workflow
Follow these steps when building any API endpoint.
- Define the route, HTTP method, and response shape first
- Create a Zod schema for request validation
- Implement the handler with typed request/response
- Add error handling that returns consistent JSON
- Write the corresponding client-side fetch hook
BAD: Unvalidated, untyped handler
// No validation, raw any types, inconsistent errors
app.post("/api/posts", async (req, res) => {
const post = await db.post.create({ data: req.body });
res.json(post);
});
GOOD: Validated, typed, consistent errors
import { z } from "zod";
const CreatePostSchema = z.object({
title: z.string().min(1).max(200),
content: z.string().min(1),
published: z.boolean().default(false),
});
type CreatePostInput = z.infer<typeof CreatePostSchema>;
app.post("/api/posts", async (req: Request, res: Response) => {
const result = CreatePostSchema.safeParse(req.body);
if (!result.success) {
return res.status(422).json({
error: "Validation failed",
details: result.error.flatten().fieldErrors,
});
}
const post = await prisma.post.create({ data: result.data });
return res.status(201).json({ data: post });
});
Error Response Shape
Every error response must follow this structure:
interface ApiError {
error: string;
code?: string;
details?: Record<string, string[]>;
}
Map status codes consistently:
201after successful creation204after successful deletion (no body)400malformed request,422valid JSON but failed validation401missing auth,403insufficient permissions409conflict (duplicate unique field)429rate limited
React Component Patterns
Follow these steps when building any component.
- Define the props interface with explicit types
- Handle all states: loading, error, empty, success
- Extract data fetching into custom hooks
- Keep components under 80 lines. Split if larger
- Co-locate types, hooks, and tests with the component
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 241 lines · 0 tokens per session scan A 61f9b994b34f
fullstack-developer is a skill published in the GitHub repository medy-gribkov/arcana (1 stars, last pushed 3mo ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 1,700 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
web-data-fetching-graphql-apollo
Apollo Client GraphQL patterns — normalized cache and type policies, queries, mutations with optimistic updates, pagination, fragments, subscriptions, and Suspense hooks.
senior-dev
Activates the SeniorDev agent for full-stack software engineering. Use this skill when you need production-ready code: Next.js 14 frontends, FastAPI backends, TypeScript strict-mode components, PostgreSQL schemas, Redis caching, authentication flows, or complete REST/GraphQL APIs. SeniorDev always outputs complete…
github-integration
Integrate with GitHub — Actions, Apps, webhooks, Octokit, and repository automation workflows.
perf-optimizer
Profile and optimize application performance — algorithmic complexity, caching strategies, database queries, and bundle size.
react-component
Build production-ready React components — hooks, context, accessibility, TypeScript types, and Storybook stories.
slack-bot-builder
Build Slack bots and apps — Bolt framework, slash commands, modals, Block Kit UI, and event subscriptions.